CVE-2020-9431: High severity Wireshark Wireshark vulnerability
Published Feb 27, 2020
·Updated
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.
Affected Software
8 affected components
Wireshark Wireshark>=2.6.0<=2.6.14
Wireshark Wireshark>=3.0.0<=3.0.8
Wireshark Wireshark>=3.2.0<=3.2.1
openSUSE Leap=15.1
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Fedoraproject Fedora=32
Debian Debian Linux=9.0
Remediation
Event History
Feb 27, 2020
CVE Published
via MITRE·10:06 PM
Data Sourced
via MITRE·10:06 PM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-9431?
CVE-2020-9431 has a medium severity rating due to potential memory leaks affecting performance.
2
How do I fix CVE-2020-9431?
To fix CVE-2020-9431, update Wireshark to version 3.2.2 or later, or use a patched version if available.
3
What versions of Wireshark are affected by CVE-2020-9431?
CVE-2020-9431 affects Wireshark versions 2.6.0 to 2.6.14, 3.0.0 to 3.0.8, and 3.2.0 to 3.2.1.
4
What component of Wireshark is vulnerable in CVE-2020-9431?
The LTE RRC dissector is the component in Wireshark that is vulnerable in CVE-2020-9431.
5
Are any Linux distributions affected by CVE-2020-9431?
Yes, Fedora (versions 30, 31, and 32), openSUSE Leap 15.1, and Debian 9.0 are affected by CVE-2020-9431.